Lucene search
HistoryDec 07, 2006 - 11:28 a.m.
CVE-2006-6364
cve
cross-site scripting
xss
ismail
security vulnerability
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6 Medium
AI Score
Confidence
High
0.018 Low
EPSS
Percentile
88.2%
Cross-site scripting (XSS) vulnerability in error.php in Inside Systems Mail (ISMail) 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter.
Affected configurations
Node
inside_systemsinside_systemsMatchmail_2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| inside_systems:inside_systems | inside systems | eq | mail_2.0 |
References
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6 Medium
AI Score
Confidence
High
0.018 Low
EPSS
Percentile
88.2%
Related for CVE-2006-6364